Revisiting Membership Inference Under Realistic Assumptions